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■  EDITOR’S  NOTE 

Don  Tennant 


Gut  Check 


HEN  WE  REPORTED  online  last  week 
that  former  CA  CEO  Sanjay  Kumar  had 
made  the  final  payment  on  the  $52  million 
in  restitution  he  owed  after  pleading  guilty 
to  accounting  fraud  charges,  some  readers  took  the  opportu 
nity  to  express  their  disdain  for  Kumar  and  for  what  he  had 
done  that  landed  him  in  prison. 


tj 


V 


equally  misinlon 
“Sanjay  fell  int< 
wrong  company,'’ 

J  [the] 

■  You  bet  there 

valued  business  partner 
—  is  forgotten  because  of 

Don  Tennant  is  editoria 
director  of  Computerv 

was  good  for  Cor 

“actually 

nputer 

was  a  reign  of 
terror  at  CA. 

all  this,"  I  wrote.  “Vilifica¬ 
tion,  in  Kumar’s  case,  is 

and  InfoWorld.  Conta 
him  at  don_tennant@ 
computerworld.com,  a 

over  bad  relation 
customers,  elimii 
many  of  the  prob 

swith 
aating 
lems  [in- 

But  it  was  hardly 
propagated  by 
Sanjay  Kumar. 

That  column  elicited  a 
heartfelt  response  from  an 
employee  who  worked  for 

visit  his  blog  at  http:// 
blogs.computerworld. 
1  com/tennant. 
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This  Quarter  EMC  wa  ship  a  line  ol  solid- 


FirSt  Look:  On  Cloud  9 
With  Apple’s  MacBook  Air 

Computerwortfs  Ryan  Faas  cals  the  new 

rent  Mac  nsorswi  have  to  change  the  way 
they  work  to  get  the  most  out  the  s*m-tine 
laptop.  FireWire  and  Ethernet  ports  are  no 
longer  Included,  tor  Instance. 


How  the  Spectrum  Auction 
Could  Change  Your  Life 

This  week’s  auction  of  larger' 


Could  Postballot 
Audits  Renew  Faith 
In  Elections? 

Supporters  of  e-vobng  reform 
say  the  tkns  is  now  to  mandate 


Opinion:  At  the  Airport^ 
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News 


BEA,  Oracle  Users 
Fear  Price  Hikes, 
Product  Line  Cuts 


TUESDAY:  Apple  plans  to  report  its  first-quarter  financial  re¬ 
sults.  Other  vendors  due  to  release  earnings  reports  this  week 
include  Sun  Microsystems  and  Sybase,  both  on  Thursday. 
SATURDAY:  The  group  Computer  Professionals  for  Social 
Responsibility  holds  a  one-day  conference  on  technology 
use  in  wartime,  at  Stanford  Law  School  in  Palo  Alto.  Calif. 


fl 
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WebSphere 


MySpace,  States  Sign 
Kids  Online  Safety  Pact 


Innovations  by  InterSystems 


Embed  competitive  advantages. 


To  make  database  applications  more  valuable,  embed  InterSystems  Cache®  -  the  object  database 
that  runs  SQL  faster  than  relational  databases  -  and  enjoy  higher  speed  and  scalability  while 
lowering  hardware  and  administration  requirements.  Or,  for  applications  that  have  to  link  with 
multiple  systems  and  processes,  embed  InterSystems  Ensemble®.  Your  applications  will  become 
connectable,  and  you’ll  be  able  to  rapidly  enhance 
p  them  with  a  rich  Web  interface,  adaptable  work- 
I  A  |  LJ  L  flow,  rules-based  business  processes,  and  other 
vMLI  I  L  new  features  -  without  rewriting. 


ENSEMBLE 


Make 

Applications 

More 

Valuable 


Download  a  free,  fully  functional  copy  of  Cach6,  < 


i  demonstration  of  Ensemble,  at  InterSystems.com/Freel4A 


by  few  vendors  other  than 
Microsoft,  and  the  addition 
of  more  information  on  how 
Open  XML,  the  native  file 
format  in  Office  2007,  sup¬ 
ports  file  compatibility  with 
older  versions  of  Office. 

The  length  of  Ecma's 
response  isn’t  surprising, 
since  ISO  members  submit¬ 
ted  3,522  written  comments 
about  Open  XML  in  the 
wake  of  the  September  vote. 
A  second  vote  is  scheduled 
for  late  next  month. 


The  first  case,  based  on  a 
complaint  from  the  Brussels- 
based  European  Committee  for 
Interoperable  Systems,  con¬ 
cerns  the  interoperability  of 
Windows  with  other  software. 

based  on  a  complaint  by  Op¬ 
era  Software  ASA  in  Oslo,  is 
looking  kilo  Microsoft's  tactic 
of  bundling  software  wtth  its 
Windows  operating  system. 

Both  new  probes  build 
on  the  findings  of  the  EC’s 
2004  antitrust  ruling  against 
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Ostriches  have  brains  smaller  than  their  eyes. 


THE ‘HACKER 


Critics  claim  that  Web  site 
vulnerability  scans  can  give 
companies  a  false  sense  of  security. 
But  users  say  that  the  scans  are  a 
valuable  part  of  their  online  defense 
strategies.  By  Jaikumar  Vijayan 


disclosed  number  of  cus-  nerabilities  than  on  detect- 
tomers  that  their  personal  ing  harder-to-find  Web 
and  credit  card  data  may  application  flaws,  such  as 
have  been  compromised  in  SQL  injection  and  cross- 
a  hacking  incident.  Geeks.-  site  scripting  vulnerabili- 
com,  whose  formal  name  ties,  he  said, 
is  Genica  Corp.,  displays  “Web  applications 

the  Hacker  Safe  logo  at  the  are  very  dynamic  and 
bottom  of  its  home  page.  ever-changing,”  whereas 
A  ScanAlert  spokes-  vulnerability  scans  rely 
man  said  “preliminary  on  static  information  to 
evidence”  suggests  that  identify  security  issues, 
the  breach  likely  occurred  Kennedy  said.  He  noted 
during  one  of  several  pe-  that  after  being  asked  to 
riods  last  year  when  Scan-  do  security  assessments  by 
Alert  had  withdrawn  its  10  companies  with  Hacker 
certification  from  Geeks.-  Safe  logos  on  their  Web 
com  after  finding  vulner-  sites,  SecureState  was  able 
abilities  on  the  Web  site.  to  break  into  nine  of  the 
Even  so,  the  incident  at  sites  and  easily  access  fi- 
Geeks.com  has  rekindled  nancial  and  customer  data, 
a  debate  about  the  value  of  Adriel  Desautels,  chief 
security  seals  such  as  the  technology  officer  at 
Hacker  Safe  logo.  Netragard  LLC,  a  Mend- 

ScanAlert  users  say  that  ham,  N.J.-based  company 
the  scanning  service  can  that  offers  manual  vulner- 
sniff  out  at  least  some  se-  ability  testing  services, 

curity  problems  and  that  said  automated  scans  can 
the  logo  is  a  valuable  mar-  Continued  on  page  14 
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What  does  it  take  to  provide  360°  communications 
in  a  24/7  business  world? 


We  had  a  ma¬ 
jor  financial 
institution  customer 
that  had  passed  an 
automated  vulnera¬ 
bility  scan.  But  then 
we  came  in  and  by 
the  end  of  the  third 
day,  [we]  had  pen¬ 
etrated  17  of  their 
internal  systems. 
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Users  Say  Sun 
Needs  to  Fix 
What’s  Broken 
At  MySQL 

Sun’s  $1B  buy  will  give  it  an 
open-source  database  —  and 
some  unhappy  customers. 

By  Patrick  Thibodeau 

w  N  AGREEING  last  velopment  suggestions. 

week  to  pay  $1  billion  For  instance,  within  hours 

1  for  MySQL  AB,  Sun  of  the  proposed  acquisition’s 
Microsystems  Inc.  announcement,  Don  Mac¬ 

s'  .  said  it  hopes  to  make  Askill,  CEO  of  SmugMug 
MySQL's  open-source  data-  Inc.,  said  in  a  blog  posting 


to  the  database,  despite  re¬ 
quests  that  it  do  so  from  him 
and  other  users. 

S  Zack  Urlocker,  MySQL’s 
I  executive  vice  president  of 
i  products,  said  it  has  applied 
s  two  patches  dealing  with  the 
performance  problems  —  one 
in  September  and  the  other 
this  month.  But  he  added 
that  he  didn't  know  whether 
those  patches  addressed 
MacAskill’s  complaints. 

ADDITIONAL  CONCERNS 

There  are  plenty  of  other 
things  that  also  need  fixing 
in  MySQL,  according  to  a 
blog  posting  by  Jeremy  Cole, 
who  formerly  used  the  data¬ 
base  at  Yahoo  Inc.  and  is 
now  a  MySQL  consultant  at 
Proven  Scaling  LLC. 

"There  are  a  lot  of  areas 
where  MySQL  has  been 
lacking  for  a  long  time,  and 
the  power  users  have  been 
either  crying  in  their  beer  or 
doing  the  work  themselves,” 
s  Cole  wrote.  For  instance, 

;  he  cited  problems  with  the 
database’s  replication,  log¬ 
ging  and  internal  memory- 
allocation  features. 


tant  acquisition”  made  by 
the  company  thus  far. 

However,  the  deal  could 
complicate  Sun's  relation¬ 
ship  with  Oracle  Corp.,  Sun’s 
largest  database  partner. 
MySQL  competes  directly 
with  Oracle  and  other  data¬ 
base  vendors.  Also,  Oracle 
owns  InnoDB,  having  bought 
its  developer  in  2005. 

“Now  that  [MySQL]  is 
going  to  be  supported  by  a 
major  vendor,  there’s  lots  of 
companies  that  are  going 
to  give  it  a  serious  look,” 
said  Robert  Lepanto,  Oracle 
applications  manager  at 
AppCentric  Solutions  LLC 
in  Stamford,  Conn.  “I  would 
think  that’s  a  serious  long¬ 
term  threat  to  Oracle.” 

Lepanto,  who  also  is  pres¬ 
ident  of  the  New  York  City 
Metro  Oracle  Applications 
Users  Group,  added  that  he's 
surprised  Oracle  “didn't  buy 
[MySQL]  first  to  squash  the 
competition.” 

Daniel  Grim,  executive 
director  of  networks  and 
systems  at  the  University 
of  Delaware  in  Newark,  has 
an  enterprisewide  Oracle 


On  die  Mark 

HOT  TRENDS  ■  NEW  PRODUCT  NEWS  ■  INDUSTRY  BUZZ  BY  MARK  HALL 


ing.  Leave  that  to 
Hubspan.  Later  this 
year.  Pease  says. 


begin  to  experiment  I —  ^ 

with  self-service.  Today,  Hubspan 
experts  need  to  work  with  you  to  map 
the  connections  between  your  apps 
and  those  you  want  to  connect  with. 
The  plan  is  to  eventually  let  ybu  do 
the  mapping  yourself.  Pease  argues 
that  the  9,000-plus  application-to- 
application  connections  Hubspan  has 
created  so  far  give  it  more  integration 
experience  than  your  staff  has,  while 
making  things  simple  enough  for  you 
to  do  the  work  yourself.  Self-service 
pricing  has  not  been  set. 


j  Plug  Wireless 


Sharks  Hungry  for  IT  Staff 

NFORMATION  TECHNOLOGY  execs  may  want  to  protect  their 

chief  scientist  at  RedSeal  Syste 
in  Redwood  City,  Calif.,  says  v 
all  the  tools  you've  given  end  t 
such  as  e-mail,  the  Web  and  it 
messaging,  "are  steppingstone 

staffs  as  legal  sharks  begin  to  hunt  for  tech  talent.  For  the  past  15 
years,  AXS-One  Inc.  in  Rutherford,  N.J.,  has  been  selling  its  infor¬ 
mation-archiving  technology  to  IT  departments.  But  says  Marie- 
Charlotte  Patterson,  vice  president  of  market  strategy,  something 

your  network  that  attackers  us 
to  important  data.”  If  you  don’ 
where  the  vulnerabilities  in  th 
tools  lie,  your  critical  informal 

changed  last  year.  “We’re  just  as  likely  to  be  talking  to  a  room  foil  of 
lawyers  and  giving  demonstrations  to  the  general  counsel,”  she  says. 

r~  -—.“I  Seal  unveile 
|  k/Sl  |  Security  Ris 

JANUARY  21. ; 


EbenMoglen 

The  founder  of  the  Software 
Freedom  Law  Center  talks  about 
taking  on  Microsoft  and  Disney, 
managing  the  software  commons 
and  ‘copyleft  capitalism.’ 


lion  dollars  a  week  in  software  is  in 
that  sense  fundamentally  still  trying 
to  [fight]  the  free  way  of  doing  things, 
Microsoft  remains  a  very  dangerous 
party. 

But  Microsoft,  too,  has  now  funda¬ 
mentally  recognized  that  there  is  not 
another  generation  left  in  the  propri¬ 
etary  software  idea,  and  they  are  trying 
to  leverage  the  remaining  value  of  their 
monopoly  in  a  world  of  mixed  free  and 
unfree  code.  As  Microsoft  begins  to 
move  itself  away  from  being  the  prima¬ 
ry  partisan  of  unfreedom,  the  second 

Continued  on  page  20 
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MAKE  ROUTINE  MAINTENANCE 

LESS  ROUTINE. 

The  HP  ProLiant  DL380  G5  Server  comes  complete  with  our  Systems 
Insight  Management  (SIM)  software.  HP  SIM  reduces  the  average  time 
I.T.  spends  on  server  administration1  by  31%  and  nearly  doubles  the 
number  of  servers  that  can  be  managed  per  administrator— saving  . 
time,  money  and  countless  headaches. 

Technology  for  better  business  outcomes. 
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Michael  Gartenberg 

Google’s  Android  Is 
An  Audacious  Move 


HILE  SOME  had  expected  Google  to  come 
out  with  an  iPhone-killing  G-Phone,  the  com¬ 
pany’s  announcement  in  November  of  the  An¬ 
droid  mobile  platform  is  something  far  more 
sweeping,  and  it  has  ramifications  for  IT. 


To  show  that  Android 
is  no  pipe  dream,  Google 
trotted  out  scores  of 
partners  in  the  initiative, 
including  handset  ven¬ 
dors,  carriers  and  soft¬ 
ware  providers.  What’s 
most  interesting  is  that 
the  Linux-based  platform 
will  be  open  source  (un¬ 
der  the  Apache  license) 
and  free  of  charge. 

So,  why  is  Google  do¬ 
ing  this?  It  aspires  to  get 
its  applications  into  the 
mobile  sphere,  but  right 
now  there’s  just  too  much 
platform  fragmentation. 
Even  Java  on  one  handset 
is  not  like  Java  on  an¬ 
other.  Lacking  a  single, 
strong  platform  to  build 
on,  Google  wants  to  cre¬ 
ate  one.  That’s  why  it 
j  isn’t  coming  out  with  its 
own  hardware  or  tying 
Android  to  one  carrier. 

The  cost  of  Android 
(there  is  none!)  is  going 
to  make  it  attractive  to 
both  handset  vendors 
and  carriers.  And  there 


are  no  strings  attached 
other  than  a  very  impor¬ 
tant  agreement  not  to 
fragment  the  platform. 
Google  will  offer  a  suite 
of  mobile  applications 
for  Android,  but  it  won’t 
require  that  the  apps  be 
used.  In  theory,  you  could 
see  Android  handsets 
with  Yahoo  Mail  and  Live 
Search,  but  no  Google 
services  at  all. 

If  Google  delivers  on 
its  vision,  the  impact 
to  consumers  could  be 
huge.  The  mass  market  is 
finally  embracing  more 

■  Is  Google’s 
entry  into  the 
mobile  market  a 
smart  move?  Yes. 
H’s  as  if  IBM  had 
offered  Linux  to  PC 
vendors  for  free 
at  the  time  Micro¬ 
soft  introduced 
WindowsNT. 


functionality  in  mobile 
devices,  but  at  the  same 
time,  carriers  and  hand¬ 
set  vendors  are  looking  to 
cut  costs.  Android  might 
bridge  that  gap.  And 
Google  has  the  corporate 
heft  to  prevent  the  mar¬ 
ket  from  fragmenting,  so 
it  could  succeed  where 
other  Linux  implementa¬ 
tions  have  failed. 

Is  Google  making  a 
smart  move?  To  answer 
that,  consider  a  bit  of 
alternative  history.  Sup¬ 
pose  that  Linux  had  been 
available  at  the  time  that 
Microsoft  came  out  with 
Windows  NT.  Now  sup¬ 
pose  that  IBM  decided 
to  offer  Linux  for  free  to 
PC  vendors  along  with  a 
core  suite  of  applications. 
How  different  would  the 
PC  business  be  today? 

Oh,  and  there  are  a  lot 
more  phones  out  there 
than  there  are  PCs. 

But,  of  course,  busi¬ 
ness  users  are  not  con¬ 
sumers,  and  corporate  IT 


will  have  a  different  take 
on  Android.  Google  will 
need  to  articulate  why 
business  users  should 
embrace  this  platform. 

At  the  moment,  a  lot 
is  missing  for  business 
deployment.  There  was 
no  announcement  that 
Android  would  support 
Exchange  synchroniza¬ 
tion,  be  compatible  with 
Office  applications  or  al¬ 
low  central  device  man¬ 
agement.  Google’s  mobile 
competitors  already 
have  solutions  for  these 
things  that  work  well. 
Enterprise  developers 
will  want  to  keep  an  eye 
on  Android,  but  it’s  not 
something  they’ll  em¬ 
brace  in  the  short  term. 

Still,  IT  cannot  ignore 
last  year’s  big  develop¬ 
ments  in  the  mobile  mar¬ 
ket.  A  year  ago,  neither 
Google  nor  Apple  was 
a  player,  and  today  they 
are  two  of  the  most  rel¬ 
evant  and  talked-about 
companies  in  the  mobile 
world.  Things  are  mov¬ 
ing  fast,  and  IT  has  to  pay 
attention  as  the  combat¬ 
ants  fire  one  salvo  after 
another.  ■ 

Michael  Gartenberg  is  vice 
president  and  research 
director  for  the  personal 
technology  and  access  and 
custom  research  groups 
at  JupiterResearch  in 
New  York.  Contact  him  at 
mgartenberg@optonline. 
net.  His  weblog  and  RSS 
feed  are  at  http://weblogs. 
jupiterresearch.com/ 
analysts/gartenberg. 
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We're  secure.  We  re  compliant. 
Now  we're  busting  out  the 


HURIMDYA 


COVER  STORY 


that  the  Internet  will 

soon  experience  a  catastrophic  failure,  a  multi- 
dav  outage  that  will  cost  the  U.S.  economy 
billions  of  dollars. 

Or  maybe  it  isn’t  likely. 


In  any  case,  companies  are  not  prepared 
for  such  a  possibility. 

But  then  again,  some  are. 

These  mixed  messages  come  from  cred¬ 
ible  sources.  The  confusion  stems  in  part 
from  the  fact  that  the  Internet  has  never 


seen  anything  much  worse  than  local  out¬ 
ages  and  brief  slowdow  ns.  But  could  it?  And 
it  it  did,  how  ready  would  your  company  be? 


Indeed,  the  threat  is  “urgent  and 
real,”  says  The  Business  Roundtable, 
an  association  of  CEOs  of  latge  U.S. 
companies.  The  Washington-based 
public  policy  advocacy  group  says 
there  is  a  10%  to  20%  chance  of  a 
“breakdown  of  the  critical  information 
infrastructure"  in  the  next  10  years, 
brought  on  by  “malicious  code,  coding 
error,  natural  disasters,  [or]  attacks  by 
terrorists  and  other  adversaries.” 

An  Internet  meltdown  would  result 
in  reduced  productivity  and  profits, 
falling  stock  prices,  erosion  of  consum¬ 
er  spending  and  potentially  a  liquidity 
crisis,  according  to  a  recent  Business 
Roundtable  report,  “Growing  Business 
Dependence  on  the  Internet  —  New 
Risks  Require  CEO  Action."  The  or¬ 
ganization  based  its  conclusions  on 
earlier  risk  analyses  done  by  the  World 
Economic  Forum  in  Geneva. 

Tom  Lehner,  director  of  public  pol¬ 
icy  at  The  Business  Roundtable,  says 
business  executives  often  fail  to  realize 
how  dependent  they  have  become  on 
the  public  network  —  for  e-mail,  col¬ 


laboration,  e-commerce,  public- 
facing  and  internal  Web  sites,  and  in¬ 
formation  retrieval  by  employees.  He 
also  notes  that  disaster  recovery  and 
business-continuity  plans  often  fail  to 
take  into  account  the  threat  an  Internet 
disruption  poses  to  a  company  and  its 
suppliers.  Moreover,  business  execu¬ 
tives  often  mistakenly  believe  that  gov¬ 
ernment  will  take  the  lead  in  restoring 
network  services  in  the  face  of  an  In¬ 
ternet  failure,  according  to  Lehner. 

“What  we  wanted  to  do  in  this  re¬ 
port  is  say  to  CEOs,  ‘You  may  not  real¬ 
ize  that  whole  segments  of  your  busi¬ 
ness  are  almost  completely  dependent 
on  the  Internet,  and  it's  not  enough  to 
have  a  few  IT  specialists  to  help  you 
respond  to  problems  as  they  come 
up,’  ”  Lehner  says. 

JUDGING  THE  RISK 

Stephen  Crocker,  an  Internet  pioneer 
and  chairman  of  the  Security  and  Sta¬ 
bility  Advisory  Council  of  the  Internet 
Corporation  for  Assigned  Names  and 
Numbers  (ICANN),  says  be  tries  to 


walk  a  line  between  “Chicken  Little, 
things-are-terrible”  scenarios  and 
“Pollyanna,  the-world-is-wonderful” 
views  of  the  Internet.  He  says,  for 
example,  that  he  worries  little  about 
a  physical  attack  on  the  Internet  — 
against  major  hubs,  lines  and  so  on.  “I 
don’t  know  of  any  physical  attack  that 
would  have  any  widespread  or  long- 
lasting  effect,”  he  says.  “The  Internet 
is  pretty  robust  at  the  physical  layer. 
There  are  just  too  many  alternate 
paths  available." 

But  the  Internet  is  not  so  robust 
at  other  layers,  admits  Crocker,  the 
CEO  of  Shinkuro  Inc.,  a  Bethesda, 
Md.-based  developer  of  information- 
sharing  technology.  He  points  to  the 
possibility  of  “systematic  failure  of 
operating  systems  like  Windows,  or 
penetration  by  worms  that  run  ram¬ 
pant  and  cause  massive  amounts  of 
chaos,”  or  floodlike  denial-of-service 
attacks.  Still,  he  says,  these  kinds  of 
disruptions,  although  annoying  and 
potentially  quite  costly,  are  typically 
resolved  in  a  matte^|HB|^^thus 
stop  of  bein^^^^^^^^^^ 

report  contemplatS^^^^^  ^ 

Others  agree  that  tn^HuIf  catas¬ 
trophe  is  minimal.  Asked  if  he  worries 
about  an  Internet  meltdown,  Michael 
Long,  senior  vice  president  of  global 
services  at  Siemens  Medical  Solutions, 
says,  “Anything  is  possible,  certainly, 
with  things  today  like  the  terrorism 
situation.  But  we  are  pretty  confident  ^ 
that  if  we  did  have  an  Interne^^|^^fl 
we’d  go  with  alternate  co^Mphtfon 
paths.” 

In  fact,  he  says,  he 
net  as  something  of  a 
dedicated  lines  from  Al^^nc!  and 
Verizon  Communicati 

Malvern,  Pa.-based : 

Solutions  provides  applicHan  host¬ 
ing  for  more  than  1,000  h^ 


e  Internet 


The  financial  services  industry  is  split  on  just  how  big 
a  deal  an  Internet  crash  would  be. 


"THE  BANKING  and  financial  sector  is 
in  good  shape  for  [Internet]  disruptions, 
as  they  have  regulatory  reguirements 
that  force  them  to  be  prepared,  and  they 
can  justify  the  expense  of  prepared¬ 
ness,"  says  Patrick  Cain,  chairman  of 
a  network  security  working  group  of 
the  Internet  Engineering  Task  Force. 
“Additionally,  many  interbank  financial 
networks  do  not  operate  over  the  vanilla 

lated  from  general  Internet  problems." 

But  other  IT  professionals  are  less 
sanguine.  "The  financial  industry  is 
worried  about  the  possibility  of  a  wide¬ 
spread  or  prolonged  Internet  outage." 
says  Dan  Schutzer,  executive  director  of 
the  Financial  Services  Technology  Con¬ 
sortium  in  New  York.  “We  already  have 
some  facility  to  work  despite  [an]  out¬ 
age,  but  we  are  also  continually  looking 

Schutzer  says  the  industry  got  a  “rude 
awakening"  on  9/11,  when  it  learned  it 
didn’t  have  the  communications  diversi¬ 
ty  and  redundancy  that  it  thought  it  did. 
As  a  result,  many  financial  companies 


have  taken  these  steps  to  protect  them¬ 
selves  against  another  Internet  outage: 

■  Set  up  dedicated  networks  inde¬ 
pendent  of  telephone  companies  in 
certain  parts  of  the  country.  “They  are 
survivable  communications  owned  and 
operated  by  financial  service  utilities," 
Schutzer  says,  declining  to  give  details. 

■  Negotiated  more  aggressively  with 
communications  companies  to  guaran¬ 
tee  diverse  routing. 

■  Separated  data  centers  and  com¬ 
munications  centers  more  widely  geo¬ 
graphically. 

But  concerns  about  reliance  on  the 
Internet  extend  beyond  direct  threats  to 
the  Net  itself,  Schutzer  says.  And  some 
of  the  more  mundane  possibilities  could 
turn  out  to  be  the  most  troublesome.  For 
example,  he  says  that  in  a  flu  pandemic, 
large  numbers  of  employees  may  be 
forced  to  work  at  home  via  VPNs  on  the 
Internet.  “What  happens  to  the  available 
bandwidth."  Schutzer  asks,  “if  these 
employees  are  competing  with  kids  up¬ 
loading  MP3  hies?" 
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and  financial  sector  is 
in  good  shape  for  [Internet]  disruptions, 
as  they  have  regulatory  requirements 
that  force  them  to  be  prepared,  and  they 
can  justify  the  expense  of  prepared¬ 
ness."  says  Patrick  Cain,  chairman  of 
a  network  security  working  group  of 
the  Internet  Engineering  Task  Force. 
“Additionally,  many  interbank  financial 
networks  do  not  operate  over  the  vanilla 
Internet,  so  they  are  a  little  more  insu¬ 
lated  from  general  Internet  problems.” 

But  other  IT  professionals  are  less 
sanguine.  "The  financial  industry  is 
worried  about  the  possibility  of  a  wide¬ 
spread  or  prolonged  Internet  outage." 
says  Dan  Schutzer,  executive  director  of 
the  Financial  Services  Technology  Con¬ 
sortium  in  New  York.  "We  already  have 
some  facility  to  work  despite  [an]  out¬ 
age.  but  we  are  also  continually  looking 
at  what  more  we  can  do." 

Schutzer  says  the  industry  got  a  "rude 
awakening"  on  9/11.  when  it  learned  it 
didn't  have  the  communications  diversi 
ty  and  redundancy  that  it  thought  it  did 
As  a  result,  many  financial  companies 


have  taken  these  steps  to  protect  them¬ 
selves  against  another  Internet  outage: 

Set  up  dedicated  networks  inde¬ 
pendent  of  telephone  companies  in 
certain  parts  of  the  country.  "They  are 
survivable  communications  owned  and 
operated  by  financial  service  utilities." 
Schutzer  says,  declining  to  give  details. 

Negotiated  more  aggressively  with 
communications  companies  to  guaran¬ 
tee  diverse  routing. 

Separated  data  centers  and  com¬ 
munications  centers  more  widely  geo¬ 
graphically. 

But  concerns  about  reliance  on  the 
Internet  extend  beyond  direct  threats  to 
the  Net  itself,  Schutzer  says.  And  some 
of  the  more  mundane  possibilities  could 
turn  out  to  be  the  most  troublesome.  For 
example,  he  says  that  in  a  flu  pandemic, 
large  numbers  of  employees  may  be 
forced  to  work  at  home  via  VPNs  on  the 
Internet.  "What  happens  to  the  available 
bandwidth."  Schutzer  asks,  "if  these 
employees  are  competing  with  kids  up¬ 
loading  MP3  hies?" 

GARY  ANTHES 


Long  does  concede  that  certain 
functions  would  be  a  “challenge”  with¬ 
out  the  Internet. 


C0MPUTERW0R10 


SERVERS,  STORAGE, 
SWITCHES. 

ONE  BOX.  NO  HASSLES. 
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whole  lot  easier.  And  cheaper. 

Introducing  Security  Software  as  a  Service  from  Webroot.' 

The  challenge  with  hardware  and  software  security  solutions  is  that  you  constantly  have 
to  maintain  them.  Your  job  is  to  deliver  value,  not  spend  precious  time  and  resources 
maintaining  security. 

Now  you  can  avoid  that  whole  hardware-software  trap  by  getting  your  security  in  the 
form  of  software  as  a  service  Webroot  E-Mail  Security  SaaS  requires  no  hardware  or 
software  on  your  part,  yet  provides  superior  protection  from  viruses  and  spam.  Webroot 
E-Mail  Security  SaaS  stores  and  tracks  100%  of  your  e-mail  offsite,  so  nothing  ever  gets 
lost  and  your  e-mail  solution  automatically  meets  your  compliance  needs. 


Annual  Cost  Per  User 
Appliance  vs.  SaaS 


Five  scanning  engines  and  a  99.999%  uptime  guarantee  deliver  the  best  e-mail  security 
solution  on  the  market.  Best  of  all,  it's  completely  painless  to  set  it  up  and  the  most 
convenient  solution  you  can  deploy.  Which  is  why  we  have  been  selected  to  protect 
more  than  2.5  million  e-mail  accounts  to  date. 


Webroot 

Software 


©  2008  Webroot  Software  Inc.  Webroot  is  a  registered  trademark  of  Webroot  Software  Inc.  in  the  United  States  and 


tently  being  offered  instead 
to  IT  workers  in  subordinate 
positions,  “that  would  be  an 
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Signs  It’s  Time 
To  Look  for  a 
New  Job  in 


obvious  sign,”  says 
Robert  Rosen,  CIO 
at  the  National  In¬ 
stitute  of  Arthritis 
and  Musculoskeletal 


Don’t  be  the  last 
to  realize  you 
ought  to  move  on. 

By  Thomas 
Hoffman 


m 


in  Bethesda,  Md„  and  past 
president  of  Share,  an  IBM 
user  group  in  Chicago. 

Often,  the  handwriting  is 
on  the  wall.  You  just  need 
to  stop,  step  back  and  read 
it.  “If  you  feel  like  you’re  no 
longer  contributing,  there’s 
a  good  chance  you  may  not 
be,”  says  Frank  Hood,  CIO 
at  QIP  Holder  LLC  (Quiz- 
nos)  in  Denver. 

YOU’VE  STOPPED 

not  learning  every 
day,  if  you’re  not  doing  new 
things,  and  if  you’re  not  im¬ 
proving,”  it’s  time  to  move 
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UK  you  hate 
wnat  you’re 
doing  or  you  re 
not  proud  of  what 
you  re  doing,  or 
there’s  an  issue 
you  need  to  talk 
to  your  boss  about 
but  you  don’t  be¬ 
cause  you  know  K 
won’t  do  any  good 
-  that’s  when  it’s 
time  to  look  for  a 
new  job. 


w  opportunity,”  says  Hans 
tiler,  chief  technology  of- 
er  at  the  National  Aquari- 


When  to  Stay  Put 


says  Craig  Urrizola,  CIO  at 
Saladinos  Inc.  in  Fresno,  Ca¬ 
lif.  The  view  is  equally  bleak 
if  you’re  an  IT  staffer  whose 


Corp.  in  Southlake,  Texas. 

Red  lights  should  be  flash¬ 
ing  if  you’ve  effectively  been 
in  the  same  role  for  two 


clout  within  an  organization 
than  a  network  engineer. 

But  all  IT  professionals  pos- 


■  If  you  are  consistently 
receiving  new  and  chal- 


help  expand  your  skills. 

■  H  you  are  offered  incan- 


on  a  strong  and  steady 
growth  path  -  and  that  is  re¬ 
flected  in  your  compensation. 


■  CAREERS 
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Ways  to'^7' 
'  Land  a  Tod  in 


Here’s  how  to  T 

get  noticed  and  x  j 
nail  the  interview.  I 

By  Thomas  ' 

Hoffman 


a  Job  in 

08 


SURE,  demand 
for  IT  labor 
intheU.S.is 
strong  across 
nearly  all  in¬ 
dustries  and 
government 

sectors.  But  having  a  techni¬ 
cal  certification  or  work  ex¬ 
perience  won’t  guarantee  an 
interview,  let  alone  a  job  offer. 


KEEP  LEARNING.  "Edu¬ 
cation  is  absolutely 
vital  to  further  your 
career  in  IT,”  says  Neill 
Hopkins,  vice  president  of 
skills  development  at  The 
Computing  Technology  In¬ 
dustry  Association  Inc. 

Employers  look  for  a  dem¬ 
onstrated  thirst  for  knowl¬ 
edge  and  a  willingness  to 


jobs  from  college  alumni, 
former  business  associ¬ 
ates  and  mentors,  says  Dan 
Reynolds,  CEO  of  The  Bro¬ 
kers  Group  LLC,  a  staffing 
firm  in  Princeton,  NJ. 

And  if  you’re  a  newbie, 
you  can  connect  with  po¬ 
tential  employers  through 
entry-level  job  listings  on  so¬ 
cial  networks,  says  Michael 
Nieset.matr- - - * 


STRUT  YOUR  STUFF. 

“Employers  want  to 
*  see ’I  managed  this, 

I  coordinated  that,’  ”  says 
Reynolds.  “They  don’t  want 
to  see  ‘assisted  with  this’  or 
‘supported  that.’  ” 

If  you  weren’t  the  project 
leader,  highlight  your  role  in 
the  success  of  a  critical  proj¬ 
ect,  says  Katherine  Spencer 
Lee,  executive  director  at 
Robert  Half  Technology  in 
Menlo  Park,  Calif. 

COME  PREPARED  FOR 
THE  INTERVIEW.  This 
sounds  like  a  no- 
brainer,  but  luring  managers 
are  increasingly  looking 
for  candidates  who  can  do 
more  than  a  “tech  interview." 
They  may  check  your  com¬ 
munication  skills  by  asking 
you  to  explain  your  past 
experiences  or  describe  how 
you  would  handle  certain 
situations  on  the  job,  says  Jill 
Herrin,  CEO  of  JDResources 
Inc.,  a  recruiter  in  Memphis. 

TALK  BUSINESS.  Pro¬ 
spective  employers  also 
want  to  know  whether 
you  understand  how  systems 
and  applications  affect  vari¬ 
ous  business  divisions  and 
the  company  overall.  “We 
want  somebody  with  techni¬ 
cal  acumen,  but  I  would  like 
to  know  that  these  people 
know  the  basis  for  making 


Microsoft 


defeating  witches.  defeating  worms, 
easy.  easier. 

% -  - 


2.  Melt  the  Witch. 

You've  seen  the  film  so  you  know  the  big  ending.  A  bucket  of  wate 
poured  directly  Witchward,  causes  her  to  steam,  melt  and  dissolve  int 
a  puddle  on  the  floor.  Lure  her  to  the  watercooler  and  you're  dom 


1.  Implement  Microsoft  Forefront? 
Forefront  makes  defending  your  systems  easier.  It's  a 
simple- to-use.  integrated  family  of  client,  server,  and 

that  helps  you  stay  ahead  of  your  security  threats 


4.  Insult  the  Witch. 

exteriors,  are  quite  sensitive. 
So  asking  "Hey,  Witch— is  that 


.  * 


■  MANAGEMENT 


Books  That  Can 
Change  Your  Life 


Marcus  Buckingham  and 
Donald  O.  Clifton,  and  Go 

Put  Your  Strengths  to  Work: 


|  way  he  approaches  things 
makes  it  very  memorable," 
says  Bart  Bolton,  a  leader- 


Must-reads 
for  2008.  By 

MaryK.  Pratt 

Andrewgalbus 

was  a  programmer/ 
analyst  at  a  food 
manufacturing  com¬ 
pany  in  the  mid-1990s  when 
he  read  Edward  Yourdon’s 


company  or  a  career  in  the 
IT  industry?’  ”  Galbus  says. 

Spurred  by  the  book’s 
message,  Galbus  got  a  job  at 
an  organization  that  helped 
its  people  build  their  careers. 
He  also  got  an  MBA.  He’s 
now  unit  manager  of  the  IT 
Quality  Office  at  the  Mayo 
Clinic  in  Rochester,  Minn. 

Books  can  educate, 
provide  insight,  prompt 
reflection  and  even  inspire 


(Free  Press,  2007),  by  Mar-  ■  The  Nibble  Theory  and  the 

cus  Buckingham.  “They  Kernel  of  Power  A  Book  About 

give  you  a  system  for  actu-  Leadership,  Self-Empowerment 

ally  identifying  and  putting  and  Personal  Growth  (Paulist 


language  to  your  _ _ _ 

strengths,”  says  _ ,  | 

Wendy  Wall-  ”  - 

bridge,  president  M  QtAI 

and  executive  ■  I 

coach  at  On  Your  ®|SC0VER 

Mark  Corporate 
Coaching  &  Con- 
suiting  Inc.  in 

Novato,  Calif.  - 

■  Death  by  Meeting: 


Press,  2004),  by 
Kaleel  Jamison. 
“This  was  a  real 
eye-opener  to  me 
on  how  I  needed 
to  step  back  and 
ithink  differently 
[about  what  I  was 
doing,”  says  Cath¬ 
erine  Brune,  se¬ 
nior  vice  president 


The  bungee  cord 
for  the  modern 
IT  executive. 


You  have  to  Stretch.  From  directing  your  company’s  IT  infrastructure  —  all  the  way  to 
contributing  to  its  business  goals.  You’re  the  one  pulled  between  two  worlds. 

Which  is  why  you’re  the  one  who  needs  Cognos.  We  are  the  experts  in  performance  management, 
delivering  a  single,  Web-based  SOA  platform  that  works  within  your  existing  infrastructure.  Unlike 
SAP  and  Oracle,  we  have  17  years  of  proven  performance  management  experience,  enabling 
organizations  like  yours  to  understand,  plan,  and  monitor  their  business.  And  with  over  23,000 
satisfied  customers  already,  we  can  put  success  within  your  reach. 

Proceed  with  confidence.'"  To  find  out  more,  visit  www.cognos.com/bungee  today. 

COGNOS 
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Trouble 

Ticket 


■  SECURITY  MANAGER’S  JOURNAL  C.J.  KELLY 

Planning  a  Recovery 
That  Isn’t  a  Disaster 

Our  overwhelmed  security  manager  wants 

her  disaster  recovery  plan  to  be  more  than 
an  exercise  in  filling  in  the  blanks. 


VERY  JANUARY. 
I  have  to  update 
my  agency's  di¬ 
saster  recovery 
plan.  The  good 
news  is  that  the  state  only 
requires  me  to  fill  in  some 
forms.  1  could  be  done 
in  half  an  hour.  The  bad 
news?  Should  one  of  the 


ing  a  network  and  all  of 
our  information  security? 

My  problem  is  that  I 
can't  help  but  identify  with 
those  nameless  FEMA  em¬ 
ployees  I  have  conjured  up 
in  my  imagination.  There 
were  probably  plenty  of 
them  who  knew  that  what 
the  agency  had  down  on 


not  public  safety.  If  a  city 
blows  up.  who  cares  if 
social  services  shut  down? 
The  top  priorities  would 
be  saving  lives,  searching 
for  victims,  discovering 
what  happened,  appre¬ 
hending  perpetrators  and 
calming  the  public.  My 
agency  isn't  involved  in 


I  AT  ISSUE:  The  disaster  I 
I  recovery  plan  isn't  worth  I 
I  the  paper  it's  printed  on.  I 
|  ACTION  PLAN:  Devise  I 
I  something  of  real  value  I 
I  despite  tight  resources.  I 

agency  has  four  physical 
locations  in  the  state:  the 
primary  and  secondary 
hubs,  and  two  small  facili¬ 
ties.  I  can  plan  a  live  test  to 
demonstrate  cessation  of 
operations  in  the  primary 
hub  and  continuance  of 
operations  in  the  second¬ 
ary  site. 

That's  probably  as  far  as 
I  will  get  this  year,  but  it's 

it  next  year. 

But  I  won't  get  that  far 
ifl  let  my  exhaustion  get 
the  better  of  me.  I  won't 
be  able  to  complete  the 
task  ahead  of  me  without 
inspiration.  What's  inspir¬ 
ing  me,  at  least  for  now,  is 
the  thought  that  the  fate  of 


Seize  the  Value  in  Business  Services! 

SaaScon  2008  •  March  25-26,  2008  •  Santa  Clara  Convention  Center  •  Santa  Clara,  California 


Learn  how  CIOs  and  their  teams  exploit 
SOA,  Web  2.0  and  Business  Services 
Hear  presentations  from  world-class 
IT  executives 

Meet  key  players  who  are  making  the  SaaS 
delivery  model  secure,  reliable  and  efficient 


Topic  areas  include: 

•  Moving  mission-critical 
applications  to  the 
business  services  model 

•  Measuring  success, 
embracing  best  practices 
and  avoiding  pitfalls 


Featured  Presenters  for  2008  include: 


•  Understanding  a  delivery 
model  in  transition 

•  Balancing  risk  and  reward 

•  Securing  data  you 
don't  control 


www.saascon.com/cwad 


■  urimun 

Paul  M  Ingevaldson 

Strategic  IT  Systems? 
There  Are  None 

A-  T  a  recent  IT  conference  in  Edmonton,  Alberta, 

I  had  the  opportunity  to  be  on  a  luncheon  key¬ 
note  panel  with  Nicholas  Carr  of  “IT  Doesn’t 
Matter”  fame,  along  with  another  active  CIO 
and  a  former  IT  researcher. 


The  initial  question 
that  we  each  were  asked 
to  address  was  this:  What 
I  is  the  role  of  IT?  Is  it  a 
strategic  resource  that 
enables  an  organization 
to  differentiate  its  prod¬ 
ucts  or  services,  or  is  it 
merely  a  cost  of  doing 
business  —  an  essential 
part  of  the  organization 
but  one  focused  on  cut¬ 
ting  costs  and  reducing 

Carr  spoke  before  I  did. 
He  talked  about  how  IT 
■  is  essential  but  not  strate- 
!  gic,  since  companies  can 
no  longer  gain  competi- 
;  tive  advantage  from  com¬ 
puter  systems  because 
most  are  using  similar 
;  software  and  thus  can't 
:  differentiate  themselves 
;  through  technology. 

I  took  a  very  different 
position,  though  in  a  very 
narrow  sense  I  agreed 
with  Carr.  I  don’t  believe 
IT  systems  are  strate¬ 
gic.  AU  strategies  must 
start  with  the  business 
strategy.  But  a  business 
strategy  without  tactical 
support  is  like  a  general 


without  an  army.  Once  j 
the  company  has  decided 
on  the  strategy,  then  each 
department,  including 
IT,  must  decide  how  it 
will  execute  the  strategy. 
These  discussions  will 
result  in  the  tactics  that 
will  bring  the  strategy  to 
life. 

Some  strategies  will 
require  a  large  portion  of 
IT  tactics;  others,  fewer. 

In  all  cases,  however,  the 
resultant  strategy  is  a 
business  strategy,  not  an 
IT  strategy.  Using  this 
process,  incidentally,  is 
how  companies  can  be 
sure  that  IT  stays  aligned 
with  the  business. 

In  my  mind,  it’s  foolish 
to  suggest  that  IT  or  any 
other  department  doesn’t 
matter.  All  are  there  to  do 
one  thing:  work  together 
to  enable  the  company  to 
gain  competitive  advan¬ 
tage.  How  they  tactically 

■  This  could  be  the 
most  important  is¬ 
sue  facing  you  and 
your  profession. 


perform  that  job,  whether 
by  means  of  existing  soft¬ 
ware  or  custom  work,  is  a 
function  of  the  strategy. 

I  would  suggest  that  if 
the  strategy  requires  the 
systems  to  operate  dif¬ 
ferently  than  those  avail¬ 
able  on  the  market,  then 
IT  must  develop  custom 
code  that  will  satisfy 
the  strategy.  IT  should 
not  force  the  strategy  to 
change  to  accommodate 
existing  software. 

The  IT  industry  must 
take  a  stand  on  this  issue. 
As  writers  and  pundits 
travel  the  conference 
circuit  and  preach  their 
visions  of  the  future,  we 
must  pay  attention,  un¬ 
derstand  the  threats  that 
are  being  suggested,  and 
make  our  voices  heard. 

If  corporate  leaders 
believe  that  IT  is  go¬ 
ing  to  become  so  easy 
and  canned  that  the  us¬ 
ers  will  be  able  to  run 
the  technology,  we  will 
continue  to  see  IT  de¬ 
partments  reduced  and 
outsourced  and  offshored 
and  treated  like  the  util¬ 


ity  that  is  envisioned. 

But  if  this  represents 
just  another  ivory  tower 
idea  like  the  paperless 
office  and  e-books,  then 
IT  practitioners  have  to 
speak  up  and  convince 
those  same  leaders  that 
IT  is  a  valuable  resource 
that  must  be  nurtured. 
Otherwise,  we  are  go¬ 
ing  to  see  a  continuing 
reduction  in  IT  college 
graduates  as  students 
follow  more  promising 
career  paths.  Companies 
will  struggle  to  achieve 
that  elusive  competitive 
advantage  as  the  number 
of  first-rate  minds  in  IT 
dwindles. 

So  here  are  a  couple 
of  action  items.  If  you 
haven’t  done  so,  read 
Carr’s  article  “IT  Doesn’t 
Matter.”  It’s  available  on 
Amazon.com.  After  that, 
stand  up  and  be  counted. 
Let  me  know  what  you 
think  IT’s  role  will  be  in 
the  future.  Perhaps  we 
can  publish  some  of  your 
comments  in  an  upcom¬ 
ing  article. 

The  outcome  of  this 
debate  isn’t  going  to  af¬ 
fect  me.  I’ve  had  my  time. 
However,  this  could  be 
the  most  important  issue 
facing  you  and  your  pro¬ 
fession.  Don’t  just  stand 
there.  Don’t  just  watch. 
Get  involved.  ■ 

Paul  M.  Ingevaldson  retired 
as  CIO  at  Ace  Hardware 
Corp.  in  2004  after  40  years 
in  the  IT  business.  Contact 
him  at  ingepi@aol.com. 
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Career 

Watm 


.  Percentage  of  bachelor's  degrees  in  CS 
awarded  to  women  in  2006.  That  s  down 
from  36°o  23  years  earlier. 

Share  of  software  engineering  |obs  held 
i  by  women.  Overall,  women  hold  half  of 
the  country's  professional  positions. 


previous  security  experience.  11  oi¬ 
lers  high-level  coverage  ol  security 
principles  and  the  emerging  issues 


Research’s  Institute 
for  Personal  Robots 
in  Education  discusses  com¬ 
puter  science  education. 


New  Stats  on  Women  in  IT 

I  In  November,  the  National  Center  for  Women  &  Information  Technol- 


especially  youngpeople-inarather 
special  way.  II  you  look  at  the  history 
ol  robotics  as  a  social  phenomenon 
rather  than  solely  as  a  technological 
evolution,  you  find  the  notion  ol  an 
artificial  person,  or  quasi-conscious 
machine,  to  be  surprisingly  deeply 
rnntfiri  -  neihaos  as  old  as  history 


itself.  It  is  this  primal  connection  to 
robots  that  we  are  partly  building  on 
in  our  exploration  of  the  technology. 

One  way  we  are  trying  to  make 
education  more  fun  and  effective 
throuoh  the  use  of  robotics  is  the 


have  one.  IPRE  will  keep  the  barrier 
to  entry  low  for  those  professors 
interested  in  trying  something  new. 
In  the  end.  robots  are  just  one  way 
to  introduce  more  students  to  pro¬ 
gramming  in  these  challenging  time 
tor  computer  science  educators. 


are  on  schedule,  having  completed 
pilot  teaching  trials  at  Geoigia  tech 
and  Bryn  Mawr  in  spring  2007.  and 


moving  10  Droaoer  teactiiny  urac 
starting  this  past  fall. 

How  about  the  expansion  t 
other  schools?  In  spring  200 
we  will  extend  the  reach  of  IPRE 


tention  in  and  attraction  of  students  its  effectiveness  quantified,  so  that 

to  computer  science.  professors  can  evaluate  whether  the 

An  important  component  of  this  approach  is  right  for  them,  which 
idea  is  that  the  robots  tor  these  we  certainly  hope.  This  is  a  central 

courses  must  be  reliable  and  inex-  tenet  of  IPRPs  approach, 

pensive  so  that  every  student  can  I  -  JAMIE  ECKLE 


SharHank 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 


Password-  Protected 

Pilot  fish  creates  an  account 
for  a  new  user,  who  tells 
hsh  that  he  has  a  hard  time 
remembering  things  like 
usernames  and  passwords. 

"I  suggested  that  he  could 
write  it  on  a  small  piece  of 
paper  until  he  memorized  it, 
then  destroy  it,"  says  fish.  “I 
emphasized  that  he  shouldn't 
write  any  other  Information 
on  the  paper  in  case  he  lost 
it,  comparing  it  to  writing 
your  PIN  on  your  ATM  card. 
He  reached  in  his  wallet  and 
pulled  out  his  ATM  card  and 
said. 'Like  this?'" 

Numbers  Game 

This  programming  team  is 
converting  an  application  for 
a  Beltway  company  that's  so 


security-conscious,  develop¬ 
ers  aren't  even  allowed  to 
choose  their  own  passwords. 
“We  were  assigned  pass¬ 
words,  which  we  had  no 
authority  to  change,"  reports 
a  pilot  fish  there.  And  despite 
many  good  password  rules, 
such  as  no  more  than  two 
repetitions  of  a  character  in  a 
row.  what  is  fish's  password? 
His  birthday.  Sighs  fish. 
“Since  I  was  born  on  Nov.  11, 
the  first  six  digits  of  my  pass¬ 
word  were  111119. 1  doubt  that 
would  pass  any  company’s 
security  rules  for  passwords." 

It’s  Only  Dumb 
If  You  Don't  Ask 

User  needs  VPN  access,  and 
this  pilot  hsh  sets  it  up.  com¬ 
plete  with  a  password  that 


mixes  digits  with  lowercase 
and  capital  letters.  And  hsh 
wants  to  make  sure  user  un¬ 
derstands  that  this  password 
is  case-sensitive;  to  empha¬ 
size  the  capital  letters,  in  his 
e-mail  with  the  password,  hsh 
makes  those  characters  both 
bold  and  underlined.  Reply 
from  user  “Thanks  for  help¬ 
ing  me  out  yesterday.  I've  set 
up  the  VPN  connection,  but 
I  can't  get  in.  Probably  be¬ 
cause  of  the  password's  for¬ 
matting.  My  (possibly  dumb) 
question:  How  do  I  activate 
underlining  of  the  letters  in 
the  password?" 

There’s  Always 
A  Reason 

Senior  sales  exec  calls  this 
IT  boss  pilot  hsh  to  complain 
that  he  only  receives  e-mail 
from  the  company  president 
when  someone  sends  a  “reply 
to  all”  message.  How  bad 
is  the  situation?  “He  claims 
he  hasn't  received  an  e-mail 
from  the  president  for  some 
time,  and  that  ‘it  is  imperative 


this  get  hxed  immediately,' " 
says  hsh,  who  checks  into 
it  posthaste.  "Inspection  of 
his  e-mail  settings  shows, 
first,  junk  filtering  set  to  High; 
second,  the  president’s  e-mail 
address  flagged  as  a 'sus¬ 
pected  junk  sender';  and  last 
but  certainly  not  least,  all  sus¬ 
pected  junk  mail  to  be  imme¬ 
diately  deleted.  Can't  imagine 
why  he  never  received  any  of 
the  president's  mail." 

■  Sharky  will  never  auto¬ 
matically  delete  anything 
from  you  —  especially  if  that 
e-mail  message  happens  to 
be  your  true  tale  of  IT  life. 
Send  it  to  me  at  sharky@ 


I  FRANKLY  SPEAKING 

Frank  Haves 


Good  Deals 


EMEMBER  WHEN  Oracle  was  a  database  vendor 
and  Sun  Microsystems  sold  workstations?  Yes,  you 
can  still  buy  Oracle  llg  or  a  Sun  Ultra.  But  last 
week’s  big  deals  —  Oracle’s  $8.5  billion  buyout  of 
BEA  Systems  and  Sun’s  $1  billion  deal  for  MySQL  —  remind  us 
that  the  days  when  vendors  fit  into  tidy  niches  are  long  gone. 

They  should  remind  us  of  something  more  fundamental,  too. 


On  the  surface,  both  something  very  good  for  I  tabulating  machines, 
deals  just  look  like  more  corporate  IT.  Those  punch  cards 

IT  industry  consolida-  It  wasn’t  that  long  ago  |  held  customer  data,  and 

tion.  In  Sun/MySQL,  Sun  when  both  Oracle  and 


that  data  w 


member  “The  Network  is 
the  Computer”?)  and  then 
added  Java  to  build  out  in 
the  application  direction. 
With  MySQL,  Sun  can  fi¬ 
nally  reach  all  the  way  in 
to  support  customer  data. 

See  what  they’re 
doing?  Oracle  and  Sun 
now  know  that  making 
parts  isn’t  enough.  Sure, 
they  want  to  grow  and 
expand  their  revenues 
and  customer  bases.  But 
more  than  that,  they 
want  to  cover  everything 
between  that  critical 
customer  data  and  the 
people  who’ll  use  it  to  do 
business. 


gets  an  end  to  its  head- 
scratching  search  for  an 
identity.  (It’s  a  transac¬ 
tion  processing  company! 
It’s  an  application  server 
company!  It’s  a  service- 
oriented  architecture 
company!) 

But  there’s  something 
else  going  on  here  — 


essing"  meant  running 
cartloads  of  punch  cards 
through  collating  and 

■  Customer 
data  is  notiust  the 
center  of  IT;  it’s 
the  center  of  your 
whole  business. 


a  database  alone  isn’t 
enough.  That’s  why 
Oracle  has  been  acquir¬ 
ing  all  those  enterprise 
applications,  building  out 
from  the  customer  data 
at  the  center.  BEA  pushes 
things  just  a  little  farther. 

For  Sun’s  part,  it  start¬ 
ed  with  networking  (re¬ 


customer  data  at  the 

Oracle  and  Sun  won’t 
forget  that.  We  shouldn’t 
either.  ■ 

Frank  Hayes  is  Computer- 
world’s  senior  news 
columnist.  Contact  him 
atfrank_hayes@ 
computerworld.com. 
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Putting  Open  Source  to  Work 


SAVE  S200 

OFF  CURRENT  PRICING 
WHEN  YOU  REGISTER  BY 

JANUARY  28, 2008 

AND  USE  PRIORITY  CODE: 
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ADDITION  THROUGH 

SUBTRACTION. 


Take  away  the  jungle  of  cables.  Take  away  the  so<alled 
"normal*  energy  requirements  and  maintenance. 
What  do  you  have?  Introducing  the  HP  BladeSystem 
c3000.  All  the  technology  of  our  larger  BladeSystem 
in  an  efficient,  compact,  affordable  package. 
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